RewindexCVEs
CVEs
1,758 matching vulnerabilities, 1,758 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2023-27524 Apache Superset: Session validation vulnerability when using provided default SECRET_KEY
CVSS 8.9 highKEV added EPSS 98.1%
CVE-2023-23752 [20230201] - Core - Improper access check in webservice endpoints
CVSS 5.3 mediumKEV added EPSS 99.8%
CVE-2016-20017 D-Link DSL-2750B Devices Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 65.8%
CVE-2023-7101 Arbitrary Code Execution (ACE) Vulnerability
CVSS 7.8 highKEV added EPSS 19.0%
CVE-2023-7024 Google Chromium WebRTC Heap Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 6.7%
CVE-2023-49897 FXC AE1021, AE1021PE OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 50.4%
CVE-2023-47565 Legacy VioStor NVR
CVSS 8.0 highKEV added EPSS 73.3%
CVE-2023-6448 Unitronics VisiLogic uses a default administrative password
CVSS 9.8 criticalKEV added EPSS 2.1%
CVE-2023-41266 Qlik Sense Path Traversal Vulnerability
CVSS 8.2 highKEV added EPSS 84.8%
CVE-2023-41265 Qlik Sense HTTP Tunneling Vulnerability
CVSS 9.6 criticalKEV added EPSS 88.2%
CVE-2023-33107 Integer Overflow or Wraparound in Graphics Linux
CVSS 8.4 highKEV added EPSS 0.74%
CVE-2023-33106 Use of Out-of-range Pointer Offset in Graphics
CVSS 8.4 highKEV added EPSS 0.79%
CVE-2023-33063 Use After Free in DSP Services
CVSS 7.8 highKEV added EPSS 0.67%
CVE-2022-22071 Qualcomm Multiple Chipsets Use-After-Free Vulnerability
CVSS 8.4 highKEV added EPSS 0.41%
CVE-2023-42917 Apple Multiple Products WebKit Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 9.3%
CVE-2023-42916 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
CVSS 6.5 mediumKEV added EPSS 17.8%
CVE-2023-6345 Google Skia Integer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 16.5%
CVE-2023-49103 ownCloud graphapi Information Disclosure Vulnerability
CVSS 10.0 criticalKEV added EPSS 77.8%
CVE-2023-4911 Glibc: buffer overflow in ld.so leading to privilege escalation
CVSS 7.8 highKEV added EPSS 63.8%
CVE-2023-36584 Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS 5.4 mediumKEV added EPSS 3.3%
CVE-2023-1671 Sophos Web Appliance Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2020-2551 Oracle Fusion Middleware Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 92.8%
CVE-2023-36025 Windows SmartScreen Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 88.1%
CVE-2023-36033 Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 10.9%
CVE-2023-36036 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 16.7%
CVE-2023-47246 SysAid Server Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.9%
CVE-2023-36851 Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files
CVSS 5.3 mediumKEV added EPSS 1.1%
CVE-2023-36847 Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
CVSS 5.3 mediumKEV added EPSS 83.5%
CVE-2023-36846 Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
CVSS 5.3 mediumKEV added EPSS 93.5%
CVE-2023-36845 Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
CVSS 9.8 criticalKEV added EPSS 95.1%
CVE-2023-36844 Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
CVSS 5.3 mediumKEV added EPSS 90.0%
CVE-2023-29552 Service Location Protocol (SLP) Denial-of-Service Vulnerability
CVSS 7.5 highKEV added EPSS 64.0%
CVE-2023-22518 Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
CVSS 10.0 criticalKEV added EPSS 100.0%Confluence
CVE-2023-46748 BIG-IP Configuration utility authenticated SQL injection vulnerability
CVSS 8.8 highKEV added EPSS 4.2%
CVE-2023-46747 BIG-IP Configuration utility unauthenticated remote code execution vulnerability
CVSS 9.8 criticalKEV added EPSS 96.7%
CVE-2023-5631 Stored XSS vulnerability in Roundcube
CVSS 6.1 mediumKEV added EPSS 76.3%
CVE-2023-20273 Cisco IOS XE Web UI Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 92.9%
CVE-2023-4966 Unauthenticated sensitive information disclosure
CVSS 9.4 criticalKEV added EPSS 100.0%
CVE-2023-20198 Cisco IOS XE Web UI Privilege Escalation Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.6%
CVE-2023-36563 Microsoft WordPad Information Disclosure Vulnerability
CVSS 6.5 mediumKEV added EPSS 20.3%
CVE-2023-41763 Skype for Business Elevation of Privilege Vulnerability
CVSS 5.3 mediumKEV added EPSS 90.5%
CVE-2023-44487 HTTP/2 Rapid Reset Attack Vulnerability
CVSS 7.5 highKEV added EPSS 100.0%ConfluenceGitLabJira
CVE-2023-21608 Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 59.4%
CVE-2023-20109 Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
CVSS 6.6 mediumKEV added EPSS 2.5%
CVE-2023-42824 Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 0.97%
CVE-2023-40044 WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability
CVSS 10.0 criticalKEV added EPSS 90.4%
CVE-2023-22515 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.2%Confluence
CVE-2023-42793 JetBrains TeamCity Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-28229 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 1.7%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)